CVS commit: pkgsrc/security/openssh

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   riastradh
Date:           Fri Aug 21 01:49:24 UTC 2020

Modified Files:
        pkgsrc/security/openssh: options.mk

Log Message:
security/openssh: New fido option.

This enables built-in U2F/FIDO security key support, without any
SSH_SK_PROVIDER middleware library needed.  Works only on platforms
with working libfido2, so not enabled by default yet.  We should
enable it by default in NetBSD>=10 and maybe some other platforms.


To generate a diff of this commit:
cvs rdiff -u -r1.38 -r1.39 pkgsrc/security/openssh/options.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssh/options.mk
diff -u pkgsrc/security/openssh/options.mk:1.38 pkgsrc/security/openssh/options.mk:1.39
--- pkgsrc/security/openssh/options.mk:1.38     Mon Nov  4 21:12:56 2019
+++ pkgsrc/security/openssh/options.mk  Fri Aug 21 01:49:24 2020
@@ -1,7 +1,7 @@
-# $NetBSD: options.mk,v 1.38 2019/11/04 21:12:56 rillig Exp $
+# $NetBSD: options.mk,v 1.39 2020/08/21 01:49:24 riastradh Exp $
 
 PKG_OPTIONS_VAR=       PKG_OPTIONS.openssh
-PKG_SUPPORTED_OPTIONS= editline kerberos openssl pam legacymodsz
+PKG_SUPPORTED_OPTIONS= editline fido kerberos openssl pam legacymodsz
 PKG_SUGGESTED_OPTIONS= editline openssl
 
 .include "../../mk/bsd.prefs.mk"
@@ -53,3 +53,8 @@ PLIST.pam=    yes
 .include "../../devel/editline/buildlink3.mk"
 CONFIGURE_ARGS+=       --with-libedit=${BUILDLINK_PREFIX.editline}
 .endif
+
+.if !empty(PKG_OPTIONS:Mfido)
+.include "../../security/libfido2/buildlink3.mk"
+CONFIGURE_ARGS+=       --with-security-key-builtin
+.endif